Amazon WorkSpaces Applications Integration with SAML 2.0

Amazon WorkSpaces Applications supports identity federation to WorkSpaces Applications stacks through Security Assertion Markup Language 2.0 (SAML 2.0). You can use an identity provider (IdP) that supports SAML 2.0—such as Active Directory Federation Services (AD FS) in Windows Server, Ping One Federation Server, or Okta—to provide an onboarding flow for your WorkSpaces Applications users.

This feature offers your users the convenience of one-click access to their WorkSpaces Applications applications using their existing identity credentials. You also have the security benefit of identity authentication by your IdP. By using your IdP, you can control which users have access to a particular WorkSpaces Applications stack.